Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: 6feLEiJ+i+1fAta3LOl3FeEGcGukteQ5/An0fhx2MoI=
Subject key identifier: BD:7E:76:B5:F2:B4:A6:EC:CD:37:AE:3E:B6:CB:B3:70:E2:34:74:88
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 01A0D796DF63A17B97083165D57E7D1863C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 0800
Signing time: Fri 25 Sep 2026 08:03:04 +0000
Manifest this update: Fri 25 Sep 2026 08:03:04 +0000
Manifest next update: Sat 26 Sep 2026 08:03:04 +0000
Files and hashes: 1: AeJUYs8KPvdeXojsNmXjmiR1Wh4.roa (hash: QZQFb9zgvngTfrMDFz4cGmkMiycjMvXPVgZGd4lxN9o=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: 8io8lU/B/sC7pShu0HSsALVnxwGvir8VW+gl61JlXMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:df:63:a1:7b:97:08:31:65:d5:7e:7d:18:63:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Sep 25 08:03:04 2026 GMT
Not After : Sep 26 08:03:04 2026 GMT
Subject: CN=bd7e76b5f2b4a6eccd37ae3eb6cbb370e2347488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:28:ba:24:e6:e4:89:3a:3b:6e:fa:fb:48:
6f:ae:3b:39:28:dc:40:d7:d1:12:6a:67:01:6d:d2:
7e:c1:d2:22:9a:03:22:7e:c0:c3:30:50:b2:40:5f:
ab:d1:8c:17:14:c6:06:6f:fc:b6:77:cb:d5:41:21:
6c:3d:d6:89:3d:d9:b7:87:aa:09:66:5f:11:72:07:
e5:bd:fd:87:ef:07:ea:94:98:73:1f:81:11:54:e1:
8e:3d:a5:ab:cb:3d:4b:38:fd:f6:5d:41:1b:c9:83:
e5:27:bd:73:05:d2:b5:61:18:a8:d9:b7:58:db:fa:
a6:72:45:cd:94:8c:4d:f5:b9:e9:63:6a:3e:68:8a:
99:75:be:41:15:74:fe:4b:74:86:a6:45:1d:d4:64:
c2:2b:dd:b9:fa:71:a9:30:26:24:4a:a3:c3:3c:04:
20:86:ae:2f:f3:b3:ac:e9:fe:f6:f6:fb:bc:58:38:
7d:9b:11:ef:00:0b:da:f5:dc:21:21:96:15:f0:22:
ca:3f:dd:fb:d3:0a:87:35:53:95:cb:fc:40:4b:13:
89:e2:20:4b:67:9b:ab:0b:75:45:32:16:9a:59:df:
28:56:55:17:80:ca:50:8d:3d:8c:46:bb:de:9d:c8:
24:69:2e:16:66:81:20:80:18:85:0e:a0:b9:8a:43:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7E:76:B5:F2:B4:A6:EC:CD:37:AE:3E:B6:CB:B3:70:E2:34:74:88
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cc:6f:c1:b3:ff:03:ee:f7:65:41:3d:ab:c2:3d:68:fc:91:
71:bc:95:ef:5e:ab:6f:50:94:09:0a:0b:05:a6:53:8b:b2:7c:
7f:18:4c:a5:3f:98:4f:5b:b4:e8:13:aa:42:72:96:de:72:aa:
44:a0:e2:a8:10:d4:59:07:66:80:6d:c0:17:1f:e7:d6:b3:84:
41:e3:95:1d:98:30:61:4e:55:de:f8:a8:38:22:53:3b:54:b5:
9b:8d:77:96:31:14:94:52:5c:20:48:1d:00:07:71:f6:f4:4e:
d8:4c:97:45:a6:fb:0a:11:79:0e:05:e6:be:33:5c:3e:4a:aa:
f5:1e:a6:5e:2a:f2:fe:32:b9:b4:84:92:97:be:3a:12:35:56:
32:ed:44:cb:e7:e8:96:65:00:ea:cb:79:0b:7c:8f:dc:d4:25:
f2:8d:b5:ad:72:7b:3a:16:c4:ef:d5:cd:19:2c:a1:14:52:81:
c0:87:f6:b1:59:d6:54:a3:7f:c0:8a:ff:75:34:03:74:76:3d:
6e:1f:73:fa:b2:5a:fa:e3:40:76:4e:a4:73:33:4e:89:f3:c1:
bd:92:41:15:61:db:d6:2f:0b:a0:a6:e9:2a:82:e3:c3:1b:17:
ab:6e:24:49:da:1c:c3:b5:02:48:88:1c:87:e2:30:4f:9e:3e:
a2:49:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:36:25 2026 by rpki-client